bind: bump to 9.18.24
authorNoah Meyerhans <frodo@morgul.net>
Thu, 15 Feb 2024 17:36:41 +0000 (09:36 -0800)
committerJosef Schlehofer <pepe.schlehofer@gmail.com>
Fri, 16 Feb 2024 18:21:54 +0000 (19:21 +0100)
commita9f1d7095c0c3fbf25f09b81163a2ca8eb07eb56
tree5070b212c2b001b0e6fd2c5aac62357521e565a5
parentb5911e2984c8127c64e92eed5e06e33d16fa8181
bind: bump to 9.18.24

Fixes CVEs:

- CVE-2023-50387: Validating DNS messages containing a lot of DNSSEC signatures
  could cause excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-50868: Preparing an NSEC3 closest encloser proof could cause
  excessive CPU load, leading to a denial-of-service condition.
- CVE-2023-4408: Parsing DNS messages with many different names could cause
  excessive CPU load.
- CVE-2023-5517: Specific queries could cause named to crash with an assertion
  failure when nxdomain-redirect was enabled.
- CVE-2023-5679: A bad interaction between DNS64 and serve-stale could cause
  named to crash with an assertion failure, when both of these features were
  enabled.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit d277e41e78972130f75dc816ebcbd7931f582519)
net/bind/Makefile